Sploitus

CVE-2017-0199

50 known exploits for CVE-2017-0199

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

Affected products
Office, Windows, Windows Server, Wordpad
Microsoft Office
= 2007, 2010, 2013, 2016
Microsoft Windows 7
All versions
Microsoft Windows Server 2008
All versions
Microsoft Windows Server 2012
All versions
Microsoft Windows Vista
All versions
CVSS 2.0
9.3 HIGH
CVSS 3.1
7.8 HIGH
EPSS
99.9% (100th percentile)
NVD status
Analyzed
Published
2017-04-12
CVE-2017-0199 at NVD
Authoritative description, scoring and affected products

50 known exploits for CVE-2017-0199

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2017-0199
2026-08-28 KitPloitKITPLOIT
CVE-2017-0199-Fix
2026-08-28 KitPloitKITPLOIT
CVE-2017-0199
2026-08-28 KitPloitKITPLOIT
cve-2017-0199
2026-08-28 KitPloitKITPLOIT
CVE-2017-0199-master
2026-08-28 KitPloitKITPLOIT
CVE-2017-0199
2026-08-28 KitPloitKITPLOIT
CVE-2017-0199
2026-08-27 KitPloitKITPLOIT
htattack
2026-08-27 KitPloitKITPLOIT
CVE-2017-0199
2026-08-27 KitPloitKITPLOIT
RTF-Cleaner
2026-08-27 KitPloitKITPLOIT
PoC-CVE-2017-0199
2026-08-27 KitPloitKITPLOIT
CVE-2017-0199
2026-08-27 KitPloitKITPLOIT
CVE-2017-0199-reprofuction
2026-08-27 KitPloitKITPLOIT
RTF-Cleaner
2026-08-27 KitPloitKITPLOIT
2017-11-17-Maldoc-Using-CVE-2017-0199
2026-08-27 KitPloitKITPLOIT
CVE-2017-0199-v5.0
2026-08-27 KitPloitKITPLOIT
Microsoft-Word-CVE-2017-0199-
2026-08-27 KitPloitKITPLOIT
CVE-2017-0199-PY-KIT
2026-08-26 KitPloitKITPLOIT
CVE-2017-0199
2026-08-26 KitPloitKITPLOIT
CVE-2017-0199
2026-08-26 KitPloitKITPLOIT
CVE-2017-0199
2026-08-24 KitPloitKITPLOIT
Exploit for CVE-2022-30190
2026-01-21 nimesh895GITHUB
Exploit for CVE-2017-0199
2022-08-15 SunqizGITHUB
Exploit for CVE-2017-8570
2018-04-08 SwordSheathGITHUB
Microsoft Office - Composite Moniker Remote Code Execution Exploit
2018-03-09 Rich WarrenZDT
Microsoft Office - Composite Moniker Remote Code Execution
2018-01-09 Rich WarrenEXPLOITPACK
Microsoft Excel - OLE Arbitrary Code Execution Exploit
2017-10-18 Eduardo Braun PradoZDT
Microsoft Excel - OLE Arbitrary Code Execution
2017-09-30 Eduardo Braun PradoEXPLOITDB
FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY
2017-09-14 RootSEEBUG
Immunity Canvas: OFFICE_WSDL
2017-09-13 Immunity CanvasCANVAS
Exploit for Code Injection in Microsoft
2017-09-13 nccgroupGITHUB
Microsoft Word MTA Handler Remote Code Execution
2017-06-27 Juan SaccoPACKETSTORMPython
Microsoft Office Word Malicious Hta Execution Exploit
2017-04-25 metasploitZDTRuby
Microsoft Office Word - '.RTF' Malicious HTA Execution (Metasploit)
2017-04-25 MetasploitEXPLOITDBRuby
Microsoft Office Word Malicious Hta Execution
2017-04-24 Haifei LiPACKETSTORMRuby
Exploit for CVE-2017-0199
2017-04-24 kn0wm4dGITHUB
Exploit for CVE-2017-0199
2017-04-23 n1shant-sinhaGITHUB
Exploit for CVE-2017-0199
2017-04-22 Exploit-installGITHUB
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 SAINT CorporationSAINT
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 SAINT CorporationSAINT
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 SAINT CorporationSAINT
Microsoft Word - .RTF Remote Code Execution Exploit
2017-04-19 Bhadresh PatelZDT
Microsoft RTF Remote Code Execution
2017-04-19 Bhadresh PatelPACKETSTORM
Microsoft Word - .RTF Remote Code Execution
2017-04-18 Bhadresh PatelEXPLOITPACKPython
Microsoft Word - '.RTF' Remote Code Execution
2017-04-18 Bhadresh PatelEXPLOITDBPython
Exploit for CVE-2017-0199
2017-04-18 NotAwfulGITHUB
Exploit for CVE-2017-0199
2017-04-17 bhdreshGITHUB
Microsoft Office / WordPad Remote Code Execution Vulnerability
2017-04-16 David RoutinZDT
Microsoft Office Word Malicious Hta Execution
2017-04-14 Haifei Li, ryHanson, wdormann, DidierStevens, vysec, Nixawk, sinn3r <sinn3r@metasploit.com>METASPLOITRuby
Microsoft Office OLE2Link vulnerability (CVE-2017-0199)
2017-04-12 RootSEEBUG